law; or
(b)
any subscriber-specific information which —
(i)
is contained in the certificate, or is otherwise provided by the
subscriber to the certification service provider, for public disclosure; or
(ii)
relates to the fact that the certificate has been suspended or
revoked.
PART VI - CERTIFICATION PRACTICE STATEMENTS
23. Preparation and publication of certification practice statements
(1) Every certification service provider shall prepare and publish on their website
a certification practice statement in accordance with the Act and these
regulations.
(2) A certification service provider shall notify the Controller and publish on
their website any proposed amendments to certification practice statements,
along with a statement of reasons for the proposed amendments, at least thirty
days before the effective date of any amendments.
(3) The Controller may notify the certification provider to remove from the
practice statement any provision which is not consistent with the Act or these
Regulations, or which in the opinion of the Controller is unreasonable, including
fees and charges.
(4) A certification service provider shall maintain on their website each version of
the certification practice statement, together with the dates when they became
effective.
24. Form of certification practice statement
A certification practice statement shall be in a form that (a)
ensures that the information conveyed clearly demonstrate the use
of trustworthy systems;
(b)
is clear, complete and concise;
(c)
conforms to any form requirements specified by the Controller.